PT-2026-30161 · Linux · Linux Kernel

Jani · Published 2026-04-03 · Updated 2026-04-03 · CVE-2026-23467

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the drm/i915/dmc subsystem where an unlikely NULL pointer dereference can occur during probe. Specifically, the intel dmc update dc6 allowed count() function may cause an oops if the DMC hasn't been initialized, resulting in a NULL pointer. This can happen when the function is called conditionally based on DC states during system initialization. The issue arises from using the incorrect hardware DC6 state for tracking, leading to the dereference. The fix involves using the software DC6 state for tracking to address both the oops and the incorrect state usage.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-23467

Affected Products

Linux Kernel

References · 12

• https://git.kernel.org/stable/c/0b35d11fbbcfd1079c8489282a341944228835e3 · Patch
• https://git.kernel.org/stable/c/631317825d44283abfe7a8374f13a76ce2032bb8 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23467 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23467 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-23467 · Vendor Advisory
• https://git.kernel.org/stable/c/ac57eb3b7d2ad649025b5a0fa207315f755ac4f6 · Patch
• https://ubuntu.com/security/CVE-2026-23467 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23467 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23467 · Security Note
• https://twitter.com/VulmonFeeds/status/2040189323685863671 · Twitter Post
• https://twitter.com/CVEnew/status/2040111859500802495 · Twitter Post
• https://git.kernel.org/linus/ac57eb3b7d2ad649025b5a0fa207315f755ac4f6 · Note